CVE-2019-10794: 
JavaScript vulnerability analysis and mitigation

When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode (Ubuntu Security).

The vulnerability has been assigned a CVSS v3.0 Base Score of 5.5 (Medium) with the following vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability affects local systems, requires low attack complexity, needs no privileges, but does require user interaction. While the scope is unchanged, it has no impact on confidentiality or integrity but has a high impact on availability (Ubuntu Security).

The vulnerability primarily affects system availability through a buffer overflow condition, with no reported impacts on confidentiality or integrity. The issue specifically occurs when processing RGB TIFF images with specific metadata characteristics (Ubuntu Security).

The vulnerability has been fixed in various distributions. Ubuntu 16.04 LTS (xenial) has been patched with version 1.3.23-1ubuntu0.2. Other versions like Ubuntu 19.10, 19.04, 18.10, and 18.04 LTS were not affected by this vulnerability (Ubuntu Security).